This could be a nice way to isolate operations of production infrastructure. You could go as far as issuing Chromebooks dedicated to the task.